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ANATOMY OF TORSION IN THE CM CASE 


ABBEY BOURDON, PETE L. CLARK, AND PAUL POLLACK 


Abstract. Let Tcm (d) denote the maximum size of a torsion subgroup of a CM 
elliptic curve over a degree d number field. We initiate a systematic study of the 
asymptotic behavior of 7 cm (d) as an “arithmetic function”. Whereas a recent result 
of the last two authors computes the upper order of 7 cm( d), here we determine 
the lower order, the typical order and the average order of 7 cm (d) as well as study 
the number of isomorphism classes of groups G of order 7 cm (d) which arise as the 
torsion subgroup of a CM elliptic curve over a degree d number field. To establish 
these analytic results we need to extend some prior algebraic results. Especially, if 
E/p is a CM elliptic curve over a degree d number field, we show that d is divisible 
by a certain function of #2£(i r )[tors], and we give a complete characterization of all 
degrees d such that every torsion subgroup of a CM elliptic curve defined over a 
degree d number field already occurs over Q. 
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1. Introduction 

1.0. Terminology, notation and conventions. Throughout, l denotes a prime 
number. We say l a exactly divides n, and write £ a || n, if t a \ n but f a+l \ n. 
We use the notation u(ri) for the number of distinct primes dividing n, and we write 
f}(n) for the number of primes dividing n counted with multiplicity. 
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If K is a number field, we let Ok denote its ring of integers, A k its discriminant, hx 
its class number, and wk the number of roots of unity lying in K. For an ideal a of 
Ok, we denote by the a-ray class field of K. 

We say an elliptic curve E over a held of characteristic zero has 0-CM if End(7f) = O, 
where O is an order in an imaginary quadratic held K. The statement U E has K- CM” 
means that E has C9-CM for some order O in K. 


The torsion rank of a finite abelian group G is the minimal number of elements required 
to generate G. 


Let be a subset of the positive integers. We define the upper density 


= limsup 

X —^OO 


n [1, x] 

X 


and the lower density 


= lim inf 

x—>oo 


#■$/ n [i,s] 

X 


When 5(srf) = we denote the common quantity by and call it the asymp¬ 

totic density of stf. 


1.1. T(d) versus 7cM(d). A celebrated theorem of L. Merel [25] asserts that if E is 
an elliptic curve defined over a degree d number held F, then ^Fi(F 1 )[tors] is bounded 
by a constant depending only on d. The best known bounds, due to J. Oesterlc (un¬ 
published) and P. Parent |28j . show that the prime powers appearing in the exponent 
of F , (F)[tors] are bounded by quantities which are exponential d. 

For certain classes of curves one can do much better. When the j-invariant of E is an 
algebraic integer, Hindry and Silverman [16] showed that for d > 2, 

#£’(F)[tors] < 1977408dlogd. 


Under the stronger assumption that E has complex multiplication (CM), it has recently 
been shown [7] that there is an effectively computable C > 0 such that 

(1) Vd > 3, #E(F) [tors] < Cd log log d. 


Let TcM(d) denote the largest size of a torsion subgroup of a CM elliptic curve defined 
over a number held of degree d. Combining ([I]) with work of Breuer [3] gives 


( 2 ) 


lim sup 

g£—KX) 


7cm (d) 
d log log d 


G 


( 0 , 00). 


In particular ([Q) is sharp up to the value of C. 


Let T(d) be the largest size of a torsion subgroup of an elliptic curve over a degree 
d number held, and let 7 Lcm(gO be the largest size of the torsion subgroup of an 
elliptic curve without complex multiplication over a degree d number held, so T(d) = 
max{T CM (d), T-,cM(d)}. We are far from knowing the truth about TcM(d) but we 
expect — cf. B 51 ] - that T_, CM (d) = 0(v / dloglogd). Again Breuer’s work provides 
lower bounds to show that such an upper bound would be sharp up to a constant. This 
would also imply that T(d) = Tcm (d) for infinitely many d. 

It is not yet known whether T(d) = Xcm (d) for any d G Z + . We have pH [33] 


7cm(1) = 6 < 16 = T(l), 7 cm(2) = 12 < 24 = T( 2). 
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Since these are the only known values of T(d), finding values of d for which T(d) = 
Tcu(d) seems beyond reach. But 7 cm (d) is known for infinitely many values, so we 
can find values of d for which T(d) > Tc\i(d). Especially, by [21, Theorem 1.4] we have 

For all primes p > 7, 7cm (p) = 6 < 16 = T(l) < T(p). 

Moreover, from [6] we know 7 cm (gO for all d < 13, which presents the prospect of 
showing T(d) > 7cm (cO for some further small values of d simply by exhibiting a non- 
CM elliptic curve in degree d with large enough torsion subgroup. We make use of the 
following recent computational results: 

• Najman [26]: T(3) > 21. 

• Jeon-Kim-Park [15] : T(4) > 36. 

• van Hoeij [17] : T(5) > 30, T(6) > 37, T(9) > 34. 

Combining with the calculations of [6] we End: 

Vd E {3,4, 5, 6, 9}, T(d) > T C M(d). 

On the other hand, we have 7 cm (8) = 7cm(10) = 50, 7cm (12) = 84, and there are no 
known non-CM elliptic curves with larger torsion subgroups in these degrees. In degree 
8 the largest order of a torsion point on a CM elliptic curve is 39, whereas there is a 
point of order 50 on a non-CM elliptic curve in degree 8. However there is a point of 
order 50 on a CM elliptic curve of degree 10, and 50 is the largest value of N for which 
the tables in mi record a degree 10 point on Y 0 (N). Further comparison of the tables 
of [T7] to the work of [5] and (6J gives several values of N for which the smallest known 
degree of a point on Y\ (TV) is attained by a CM-point, e.g. N E {57, 61, 67, 73, 79}. 

In summary, it seems that the tools are not yet available to determine T(d) for more 
than a few values of d , let alone to arrive at a theoretical understanding of the asymp¬ 
totic behavior of this function. Henceforth we consider only the CM case, which is 
much more tractable and apparently related to the non-CM case in interesting ways. 

1.2. Anatomy of Tcm(^)- The goal of the present paper is to regard Tcm(^) as an 
“arithmetic function” and study its behavior for large values of d in the fashion that one 
studies functions like Euler’s totient function p. From this perspective, (J2J) gives the 
upper order of T CM (d). However, as with more classical arithmetic functions, T CM (d ) 
exhibits considerable variation, and it is also interesting to ask about its lower order, 
its average order, and its “typical order” (roughly, its behavior away from a set of d of 
small density). It turns out that now is the right time to address these questions: by 
using — and, in some cases, sharpening — the results of [|2j and [7], we hnd that we 
have enough information on the elliptic curve theory side to transport these questions 
into the realm of elementary/analytic number theory and then answer them. 

We first determine the typical order (in a reasonable sense) of T CM (d). 

Theorem 1.1. 

(i) For all e > 0, there is a positive integer B e such that 

5({d E Z+ | T cu (d) > B e }) < e. 

(ii) For all B E Z + , we have 

5({d E Z + | Tcu(d) > B}) > 0. 
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Though stated separately for parallelism, the proof of Theorem 11.1 If ii) is immediate. 
Indeed, starting with any CM elliptic curve E/ Q, we may adjoin the coordinates of a 
point of order N to obtain a field F 0 of degree d 0 (say). Considering extensions of F 0 , 
we find that Xcm(gO > N whenever do \ d and thus 

5({d \ T cu (d) > B}) > 

do 


We turn next to the average order of 7 cm (d). 

Theorem 1.2. 

(i) We have (d) = ^/(logx) 14 " 0 ^ 1 ^. In other words: for all c < 1, 


lim ,, c 

x^-oo x/ log X 


= 0, 


and for all C > 1 we have 


lim 


y T,d<x T cu{d) 


x^oo x/\og C X 


= oo. 


(ii) We have ~ r J2d<x 7cm (d) = x 1 / 3+0 d). In other words: for all c < 

X 2\d 


y Y^d<x 7cm (d) 


lim 


2-f d 


X c 


= CO, 


and for all C > \. 


y 5 ~2d<x Tcu(d) 


lim -^ 

tc->-oo x 


■C 


= o. 


Remarks 1.1. 


(i) The average order of T CM (d ) restricted to odd degrees is considerably smaller 
than its average order restricted to even degrees. This is another confirming 
instance of the odd/even dichotomy explored in [2]. 

(ii) The average order of Tcm(^) is considerably larger than the conjectural maximal 
order y/d log log d of T(d). 


Now we turn to the lower order of Xcm(gO. When E is a CM elliptic curve over Q, 
Olson [27j showed that there are precisely six possibilities for the group 2£(Q)[tors] (up 
to isomorphism): the trivial group {•}, Z/2Z, Z/3Z, Z/4Z, Z/6Z, and Z/2Z x Z/2Z. 
We call these the Olson groups. From [2j Theorem 2.1(a)] we know that for any abelian 
variety defined over a number field A/p and all integers d > 2, there are infinitely many 
degree d extensions L/F with Al(L)[tors] = Al(F)[tors]. In particular, since the Olson 
groups occur over Q, each of them occurs as the torsion subgroup of a CM elliptic 
curves over a number field of every degree, and thus T CM (d ) > 6 for all d. Let us say 
that d e Z + is an Olson degree if the only torsion subgroups of CM elliptic curves in 
degree d are Olson groups. In [2J Theorem 1.4] it was shown that every prime number 
d > 7 is an Olson degree. We deduce 

lim inf Tcm(^) = 6 . 

d—>• OO 
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Remark 1.2. If d is an Olson degree, then Tcu(d) = 6. In fact the converse holds, 
so the Olson degrees are precisely the degrees at which 7 cm (d) attains its minimum 
value. This comes down to showing that if 7 cm (d) = 6, then there is no CM elliptic 
curve E defined over a degree d number held F with an F-rational point of order 5. 
But from Theorem 1.5], the existence of such an E/p forces d to be even, and thus 
Tcuid) > T c m(2) = 12. 

It is natural to ask for more precise information about the Olson degrees. Above we 
saw that the upper order of 7 cm (d) is attained (or even approached) only on a very 
small set of d’s. The result that all prime degrees d > 7 are Olson leaves open the 
possibility that the set of Olson degrees has density zero. In fact this is not the case. 

Theorem 1.3. The set of Olson degrees has positive asymptotic density. 

We also extend [2, Theorem 1.4] in the following complementary direction. 

Theorem 1.4. For all n E Z + , there is a P = P{n ) such that for all primes p > P, 
the number p n is an Olson degree. 

Finally we consider the distribution of groups G that realize the maximality of Tcm (d). 
Say that the finite abelian group G is a maximal torsion subgroup in degree d if 
j^G = 7cm (d) and there is a CM elliptic curve E over a degree d number held F 
with T'(7 1 )[tors] = G. From the maximal order result in [7j, each maximal torsion 
subgroup G in degree d < x has size 0(x log log x). In view of Lemma [8.21 below, this 
leaves us with x xloglogx possibilities for G. The next result describes how many 
such groups actually occur. 

Theorem 1.5. For d E Z + , let M.(d) be the set of isomorphism classes of groups G 
such that j^G = 7cm (d) and G = E(F) for a CM elliptic curve E defined over a degree 
d number field F. Then 

# U M(d) = a;/(loga;) 1+0 ^. 

d<x 


1.3. Algebraic results. In order to prove the results of the last section we need to 
sharpen and extend some of the algebraic results of [5] and [2], 


The prototypical result that gives leverage on torsion in the CM case is the following 
theorem of Silverberg and Prasad-Yogananda [521150] : if E/p is an (9-CM elliptic curve 
defined over a number held F admitting an irrational point of order N, then 

<p(N)<#0*[F: Q], 


Moreover, if F D K then 
whereas if F fb K then 


2g>(N) <#0 x [F:Q], 


^(#£(F)[tors]) <#0 x [F:Q]. 

We call these inequalities the SPY bounds. They were refined when N is prime in [5] 
and [2] by separate consideration of the cases in which N is split, inert or ramihed in 
the CM held K. Moreover, at least in the case of CM by the maximal order, classical 
theory gives a tight relationship between F-rational torsion and the containment in F 
of ray class holds of K. The following result systematically relates SPY-type bounds, 
for prime powers N, to ray class containments. 
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N I ff Olson degrees in [1 ,N] 


1000 

10,000 

100,000 

1,000,000 

10,000,000 

100,000,000 

1,000,000,000 

10,000,000,000 

100,000,000,000 


265 

2649 

26,474 

264,633 

2,646,355 

26,462,845 

264,625,698 

2,646,246,218 

26,462,418,808 


Table 1. Counts of Olson degrees to 10 11 . 


Theorem 1.6. Let F be a degree d number field containing an imaginary quadratic field 
K. Let E/ f be an elliptic curve with O-CM, where O is the order in K of discriminant 
A. Suppose E(F)[£°°] = Z/£ a Z x TLjt Z, where b > a > 0 and b > 1. Then: 


(i) 

If 

(fb 


1, then a = b, and i 2b 2 (£ 2 — 1) 

1 w K 

■ [F n 

: K(°k\ 

(ii) 

If 

(f) = 

= 1 

and a 

= 0, then £ h ~ l {£ — 1) % 

■IF 

n K (t b o K ) . x(o K )]' 

hi) 

If 

(f) = 

= 1 

and a 

> 1, then £ a+h ~ 2 (£ — l) 2 | 

w K ■ 

[F 0 A'(COx) . 

K (°^)]. 

iv) 

If 

(t) = 

= 0 

and £ 

ramifies in K , then £ a+b 

(I- 

1) I w K ■ [F n K^ b °^ : K(°k)] 

(v) 

If 

») = 

= 0 

and £ 

is unramified in K , then 





£max{a+&—2,0} - \){£ - (Ak) ) | w K ■ [F O : K^]. 


These divisibility results combine in a natural way if one wants to consider the full 
group of T-rational torsion (see Theorem 12.4(1 . 

The other main algebraic result is a complete determination of all Olson degrees. Recall 
that a set of of positive integers is called a set of multiples if whenever a G srf, every 
multiple of srf is also in srf. This is easily seen to be equivalent to requiring that 
srf = M (f#) for some set of positive integers where 

M(£f) = {neZ + : g \ n for some g G 

We call ^ a set of generators for srf. 

Theorem 1.7. The set of non-Olson degrees can be written as M (C#) ; where 
& = {2} u \ £ = 3 ( mod 4 )’ £ > 3 | • 

An algorithm for computing all torsion subgroups of CM elliptic curves in degree d is 
presented in [6]. In principle this algorithm allows us to determine whether a given 
degree d is Olson. However, the algorithm requires as input the list of all imaginary 
quadratic fields of class number properly dividing d so is for sufficiently large composite 
d quite impractical. In contrast, using Theorem 11.71 one can compute in a day on a 
modern desktop computer that there are 26,462,418,808 Olson degrees d < 10 11 . Since 
7r(10 n ) = 4,118,054,813, this adds 22,344,363,994 composite values of d for which the 
complete list of torsion subgroups of CM elliptic curves in degree d is known. Such 
calculations suggest that the density of Olson degrees, which by Theorem 11.31 lies in 
(0,1), is in fact slightly larger than see Table Q] 
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We also found that for all primes p > 5 and all n G Z + , if p n < 10 30 then p n is an 
Olson degree^ Thus we conjecture the following strengthening of Theorem 11.41 

Conjecture 1.8. p n is an Olson degree for every prime p > 5 and all n G Z + . 

2. Divisibility requirements for rational torsion 

The next two results are taken from the already mentioned work [?]. 

Lemma 2.1 ([7J Theorem 5]). Let K be an imaginary quadratic field, F D K be a 
number field, E/p a K-CM elliptic curve, and N G Z + . If (Z/iVZ) 2 E(F), then 
F D K (NOk \ 

Lemma 2.2 ([7J Theorem 6]). Let K be an imaginary quadratic field, F D K a number 
field, and E/p an O-CM elliptic curve. Suppose that E(F)[£°°] = Z/£“Z x Z/£ 6 * Z, 
where b > a > 0 and b > 1. Then [F(E[£ b ]) : F] < £ b ~ a . In fact, letting A denote the 
discriminant of O, we have the following more precise results: 

(i) If (A) = 0 or = -1, then [. F(E[£ b ]) : F] \ I b ~ a . 

(ii) If (j) = 1, then either a = 0 and [F(E[£ b ]) : F] \ (£ — 1 )£ b ~ 1 , or a > 0 and 
[.F(E [£ b ]) : F] | £ b ~ a . 

Remark 2.1. Statements (i) and (ii) are not explicitly included in [7j Theorem 6]; 
however, they follow immediately from the proof. In fact, as we recall below, when 
(y) = — 1 we always have b = a. 

Lemma 2.3. Let F be a degree d number field containing an imaginary quadratic field 
K. Let E/p be an elliptic curve with O-CM, where O is the order in K of discriminant 
A. Suppose E(F)[£°° ] = Z/CZ x Z/£ b Z, where b > a > 0 and b > 1. If 

(i) (j) = —1, then a = b, and hp • £ 2b ~ 2 {£ 2 — 1) | wk\, 

(ii) (j-) = 1 and a = 0, then hp ■ 1? 6_1 (^ — 1) | wp%, 

(iii) (y) = 1 and a > 0, then h K ■ £ a+b ~ 2 (£ — l) 2 | wp 

(iv) (y) = 0 and £ ramifies in K, then h K ■ £ aJrb ~ x [£ — 1) | w K ^, 

(v) (y) = 0 and i is unramified in K, then h K ■ £ m ^ a+b ~ 2 ^ (£— l)(f — {^fr)) \ wi/rf • 

Proof. We follow the proof of [2], Theorem 4.6]. By Lemma 12.11 K ^ b ° K ) F(E[£ b ]). 

Recalling that K(j(E )) is a ring class held of K, we see that F D K(j(E)) D K^° K \ 
Let d 0 = [ F(E[£ b ]) : F\. 

The Hilbert class held rOk) } ias degree hp over K . From [U Proposition 2.1, p. 50], 
the degree of K( £b ° K ) over K(°*) is Here $ is the analogue of Euler’s function 

for the ideals of Op, so that 

$(£ b ) = #(Op/£ b Op) x = £ 2b - 2 (£-l)(£- ^^), 


3 A warning: To perform the above computations, we made extensive use of the PARI/GP command 

quadclassunit to compute class numbers of imaginary quadratic fields. That algorithm has been 

proved correct only under the assumption of the Generalized Riemann Hypothesis. However, the 

counts up to 10 6 in Table [T] have been certified unconditionally, as has the result that there are no 

non-Olson prime powers p n < 10 14 (with p > 5). 
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h K 

K 

2 

Q 


FIGURE 1. Diagram of fields appearing in the proof of Lemma [2.31 


U = Ox, and Up is the subgroup of units congruent to 1 (mod £ b ). Since [U : Up] 
divides 

C- 2 (C - 1 )(l - Pf \) | wk ■ \F(E\l b ]) : A<°*>] = w K ff-d v . 


Thus, 

(3) 


£ 2b ~\£-l )(£-(**)) _ d 

gcd(£ 2b ~ 2 (£ — 1)(£~ (^)),d 0 ) Wl< 2h K 


Suppose that (y) = —1. In this case, the existence of a single F-rational point of order 
£ b implies that E(F) contains E[£ b ]. Indeed, as shown in the proof of [2], Theorem 4.8], 
any torsion point of order £ b generates E[£ b ] as an O-module. Thus, a = b and do = 1, 
and we obtain the first possibility in the lemma statement. 

Suppose next that (y) = 1 and a = 0. Lemma 12.21 shows that d 0 I £ b ~ l {£ — 1), so that 
the left-hand side of © is divisible by £ b ~ 1 (£— 1). Thus, we have the second possibility 
indicated in the lemma. If (y) = 1 and a > 0, then d 0 \ £ b ~ a , and the left-hand side 
of ([3]) is divisible by £ a+b ~ 2 {£ — l) 2 . This gives the third possibility indicated in the 
lemma statement. 

Finally, suppose that (y) =0. If £ ramifies in K , we use that do \ £ b ~ a to deduce that 
the left-hand side of © is divisible by £ a+b ~\£ - 1). If £ is unramified in K, we use 
that the denominator in © divides ^ mm F- a , 2b “ 2 } to deduce that the left-hand side of 
© is divisible by ^ max { a + fc - 2 >°}(£ — 1)(£ — (yF)). In this way, we obtain the fourth and 
fifth possibilities in the lemma statement. □ 


Proof of Theorem U.di . Note that [. FK ^ b ° K '> : F] = \K^- j o k ) : F fi K (f!h ° K ' ) ] 1 and that 
this common value divides both [F(E[£ b ]) : F] = d 0 and [. K ^°k) : K l '° K f = <f>(£ b )/[I/ : 
Up]. Consequently, [K {l:b ° K ' ) : F fl K^ 0 ^] | gcd(<h(f' b ), d 0 ), and so 

[K^° k) : K { ° K) ] | ged {$(£ b ),d 0 ) • [FFK {e - b ° K) : K { ° k) ]. 
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Multiply through by [U : U(b\ to find that 


gcd($(t' 6 ),d 0 ) 


[U : Up] ■ [F n K {lb ° K) : K { ° k) } 


w K ■ [F fl K^° k) : K ( ° k) }. 


But the first term on the left coincides with the left-hand side of (f31) ■ The theorem 
now follows from the case-by-case analysis found in the proof of Lemma 12.31 □ 


Thus far we have examined the divisibility requirements for rational torsion prime-by¬ 
prime. ffowever, the conditions combine in a natural way to give divisibility results 
for the full group of rational torsion. Let F be a number field containing an imaginary 
quadratic field K, and let E/p be an elliptic curve with CM by an order in K of 
discriminant A. Suppose #.E(.F)[tors] = n. For each £ \ n, we have E(F)[£°°] = 
Z/fUZ x Z/£ b,! Z, where be > a? > 0 and be > 1. Thus, £° l || n, where ae := ae + be . For 
each £ ae , we define a constant A e a e in the following way: 

(i) If (A) = _i ; then A^ := £ 2b ‘~ 2 (£ 2 - 1). 

(ii) If (y) = 1 and ae = 0, then A e<*e £ bl ~ l {£ — 1). 

(iii) If (y) = 1 and ae > 1, then \e» t £ a e+ b e~ 2 (£ — l) 2 . 

(iv) If (y) = 0 and £ ramifies in K, then A^ := £ a e+b ( -\ 

(v) If (y) = 0 and i is unramified in K, then A e a t '■= ^ max f a ^+^- 2 >°}(£— 1){£ — 

Note that by Theorem 11.61 we have A e a i \ wk • [F fl K^ be ° K ) : K ( ° K ' ) ]. 

Theorem 2.4. Suppose that there is a K-CM elliptic curve E over a degree d number 
field F D K with ffE(F)[ tors] = n. Then hp ■ Y\e\n -Vv I 6d. 


Proof. Take any Ji-CM elliptic curve E/ F with [F : Q] = d and #F’(F)[tors] = n. Let 
O be the CM order, and say A is the discriminant of O. As above, for each l | n, write 
E(F)[£°°] = 7Ll£ aiL 7L x Z/f^Z, where be > ae > 0 and be > 1. Let N be the exponent 
of A(F)[tors], so that N = \\e\ n ^ be - Let ^oy denote the degree [F(E[£ bt ]) : F], and 
observe that the degree d 0 of F(E[N])/F satisfies 

do | d 0 e- 

l\n 


Using that F(E[N]) D K ( - NOk \ we find that 


(4) 

Y [£ 2b *~ 2 (£-!)(£- (^f\) = [U : U n ]-[K (NO k) : K { ° k) ] 


w k 


d 

2 h K 


do 


w K 


d 

2 h K 


H do a- 

i\n 


Suppose first that ae ae + be > 2. Then the case analysis in the proof of Lemma [2.31 
shows that d 0 y \ £ 2be ~ 2 (£—l)(£— (yF)), and that the quotient £ 2bl ~ 2 (£ —1){£— (yy))/d 0 y 
is a multiple of . 

Now suppose that ae — 1. Then ae = 0 and be — 1. Note that we cannot have (y) = — 1 
in this case, since that condition forces ae = be- If (y) = 1, then d 0 y | £ — 1, and so 

(5) a, = i -11 -1 )(< - (AI )/do/ . 

If (y) = 0 and (yy) = 0, then d 0 y | £■, so that again (J5]) holds. Note that if (y) = 0 
but (yy) 7 ^ 0, then d 0) e \ £ while 
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F(£[JV]) 


[U:U N ] n^| n 


-2 



h 


K 


K 

2 


Q 


FIGURE 2. Diagram of fields appearing in the proof of Theorem 12.41 


a, = « 2, "- 2 (« -1)(£ - L^j) 6 {e -1, a - 1) 2 }. 

Let Sf l be the set of prime powers d. ai exactly dividing n for which either ai > 2, or 
a? — 1 and either (y) ^ 0 or {^j L ) = 0. Let 5^2 be the complementary set of exact 
prime powers divisors of n. Of course, actually consists only of primes. Referring 
back to ((4]), 

(6) n n a< i n l 

rt&yi t&y 2 K 

On the other hand, Theorem 11.61 implies 

\t*t | W K ■ [F n K^ tOK ^ : K^° k) ] 

for each prime i dividing n. The fields F 0 K^ be ° K ' > are linearly disjoint extensions of 
K^° K \ all contained in F. Thus, with m := u)(n), 

(7) n n a ' i < ■ t : k{ ° k) \=<- 4r- 

l a i e-Yi iey 2 K 

Putting (JH]) and (JTJ) together, we find 

(8) A ri A £ | w K —,— t 

r^y, ^y 2 2tlK ^y 2 ,t\ WK 

If Wk — 2, it follows that 

n n Af 1 2 /~- 

e a teyi t&y 2 

In fact, if Wk = 4, the same divisibility condition holds. Indeed, 2 is the only prime 
that divides Wk, but 2 ^ <5^ since 2 ramifies in K = Q (i). If wk = 6, then 3 ^ 5^2 
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since 3 ramifies in K = Q(y/— 3), and (J8J) implies 

n ni 6 /—- ° 

rz&y-t i&y 2 A 

As a consequence, in the case of Op- CM elliptic curves, we recover the SPY Bounds 
as divisibilities. 

Corollary 2.5 (SPY Divisibilities). Let F be a number field of degree d containing an 
imaginary quadratic field K, and let E/p be an Ok-CM elliptic curve. If E has an 
F-rational point of order N, then 

hpip(N) | -d. 

Proof. Suppose E/p has a point of order N = YJ£ e{ . For each £ | N, 

E(F)[£°°] ^ Z/£ at Z x Z/&Z, 

where bg > ag > 0 and bg > eg. Since E has CM by the maximal order, there are no 
primes of type <5^, and for each £ at e we have tp(£ be ) \ Xga e . Thus by (J6]) we have 

^w=n^)in^)i n x >-1 ^ 4 - D 

e\N i \n rt&yi K 

Remarks 2.2. Let us discuss the sharpness of the divisibilities obtained in Theorem II.61 

(a) If £ 2 and a = b, then in every case Theorem 11.61 gives 

e b ~'\l - 1 )(l- Of\)lw K | [A-< ,io *> : 

Since in fact we have 

|a -«‘Ok> . A <o K )] = _ 1W _ y WKt 

Theorem 11.61 is sharp in this case, which includes all of Case (i). 

(b) If (y) = 1 and a = 0, the image of the Cadic Galois representation lands in a 
split Cartan subgroup (cf. [2( §3.4]). Thus for all n e Z + we have an F-rational 
subgroup of order £ n . If £ is an odd prime, it follows from [2J Theorem 7.2] that 
there is an Op -CM elliptic curve E defined over an extension L/K ( ° K ) with 
[L : K ( - 0k> ] = (p(£ n )/2 such that E(L) contains a point of order £ n . Thus the 
divisibility condition given is best possible when wp = 2 and £ is odd. 

(c) In Theorem 11.61 we recorded the divisibilities in terms of [F fl K F 6 °a) . K^°k)] 

rather than in terms of [F : K] = [F : because we get a stronger 

result by doing so. However, it may be more natural to ask for best possible 
divisibilities of [F : K]. In part (b) above, the optimality occurs in this stronger 
sense. As for part (a), when £ does not divide the conductor f of the order O , 
classical CM theory implies that there is an elliptic curve defined over A'* 7 ' 1 
with full f'Ctorsion and thus multiplying the bound of Theorem II.61 bv hp gives 
the optimal divisibility of [F : K] in this case. 

(d) The field F also contains the ring class field K{0 ) of the order O. Let fg = 
ordg(f(0)) and suppose that fg > 1. (This is the condition under which we 
cannot reduce to the case of Op- CM.) For all £ > 2 we have 

ord e [KfO) : K { ° k) ] = £ fe ~\ 
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so if fc > 2b — | {^f~) | then there is a larger power of £ dividing [F : K^° K ^] than 
is given by Theorem 11.61 (This does not say that Theorem 11.61 is not optimal 
but rather that it could be refined by considering an additional parameter.) 

(e) In case (v) of Theorem 1 1.61 there are values of a and b for which we suspect that 
the divisibility on d — [F : K ], at least, can be improved. Suppose wk = 2, 
b = 2, a = 0 and {^f-) = 1- In this case Theorem 11.61 implies hx{£ — l) 2 | d, 
whereas the SPY bounds here give £(£ — 1) < d: this is not quite implied by 
our result! In light of Corollary 12.51 it is reasonable to expect in all cases the 
SPY bounds may be multiplied by a factor of hp and yield divisibilities^ If so, 
the two results would combine to give hx£{£ — l) 2 | d. Note that by part (d) 
this certainly occurs if fe > 2 , so the open case is precisely fe — 1. 


3. Proof of Theorem 11.11 Typical boundedness of T CM (d) 

We need a result from the part of number theory known as the ‘anatomy of integers’. 

Proposition 3.1 (Erdos-Wagstaff [10[ Theorem 2]). For all e > 0, there is a positive 
integer B' e such that the set of positive integers which are divisible by £ — 1 for some 
prime £ > B' e has upper density at most e. 


Proof of Theorem 11.11 Suppose that 

(9) Tcm(^) > B. 

We will see that if B is a constant chosen sufficiently large in terms of e, then for large 
x the inequality ((9]) has fewer than ex solutions d < x. 

Choose a degree d number held F and a CM elliptic curve E/p with ffE(F) [tors] > B. 
Let K denote the CM held. Suppose to start with that ffE(F)[ tors] has a prime factor 
£ > B' + 1, where B' = in the notation of Proposition 13.11 Since £ divides 

ffE\FK)[ tors], Lemma 12.31 shows that 

[FK : (I 


- 1 w K - 


Wpd I 12d. 


Note that 12d < 12a;. By the definition of B', once x is large, there are fewer than 
4; • 12a; = fa; possibilities for 12d, and so also at most fa; possibilities for d. 

Now suppose instead that each prime factor of #E(F)[ tors] is at most B' + 1. Then 
#E'(F)[tors] has at most r := n(B' + 1) distinct prime factors, and so we can choose 
a prime power £ a || ^E'(F)[tors] with 

r > (#E(F)[ tors]) 1/r > B 1 ^. 

Let us impose the restriction that B > (B' + l) r . Then £ a > B' + 1 > £, and so a > 2. 
Applying Lemma 12.31 in the same manner as above, we find that 12 d is divisible by 
either £ a ~ 2 (£ 2 — 1), £ a_1 (l' — 1), or £ a ~ 2 {£ — l) 2 . Thus, the number of possibilities for 
12 d is bounded by 

111 


12a; 


+ 


+ 


£a-2(£2_l) _1) £«-\£-\) 


2 / — 


< 12x 


4/3 2 4 

-T — T — 

£a £a 


< 100 - 


X 


2 In fact, we believe that Silverberg’s arguments can be easily adapted to yield these strengthenings. 
We will revisit this in a later work. 
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Now sum on the possible values of £ a . We find that the number of choices for d is at 
most 

lOOx V — = 100z V V —. 

/ ^ fa / j / -j fa 

£<B'+1 a:a> 2 

i<B '+1 e a >B 1 / r 

a> 2 

The geometric series appearing as the inner sum is at most twice its largest term; this 
yields an upper bound for the right-hand side of Now impose the additional 

restriction that B > (42Qn)r_ Then our upper bound here is smaller than Putting 

this together with the result of the last paragraph finishes the proof. □ 


Remark 3.1. By a more refined analysis, using techniques recently developed to study 
the range of Carmichael’s A-function [23] [IT] , one can establish the following sharpening 
of Theorem 11.11 as B —* oo, the upper and lower densities of {n | Tcm(gO > B} both 
take the form (logi?) - ^" 1 "^ 1 ! Here 


, 1 + log log 2 

n — 1--- 

log 2 


0.08607..., 


the Erdds-Ford-Tenenbaum constant. Details will be presented elsewhere. 


4. Proof of Theorem 11.71 Characterization of Olson degrees 

As already mentioned in the introduction, any group that appears as the torsion sub¬ 
group of a CM elliptic curve over a degree d number held also appears over some 
degree d! number held, for each multiple d! of d (see [2., Theorem 2.1(a)]). So the set 
of non-Olson degrees is indeed a set of multiples. 

To prove that the set appearing in the statement of Theorem [T7T]is a set of generators, 
we need the following results from [2]. 

Proposition 4.1 (J2J Theorem 4.9]). Let F be a number field that admits a real em¬ 
bedding, and let E/ F be a K-CM elliptic curve. If E(F) contains a point of order n, 
then Q(Cn) C FK. 

Proposition 4.2 ([2] Theorem 7.1]). Let F be a number field of odd degree, and let 
E/f be a CM elliptic curve. Then 17(F) [tors] is isomorphic to one of the following 
groups: 

(i) the trivial group {•}, Z/2Z, Z/4Z, or Z/2Z x Z/2Z, 

(ii) the group r L/£ nr L for a prime £ = 3 (mod 8) and some positive integer n, 

(iii) the group r Lj c l£ nr L for a prime £ = 3 (mod 4) and some positive integer n. 

Conversely, each of these groups appears as the torsion subgroup of some CM elliptic 
curve over some odd degree number field. 

Proposition 4.3 ([2] Corollary 7.5]). Let O be an imaginary quadratic order of dis¬ 
criminant A, and let £ > 2 be a prime dividing A. There is a number field L of degree 
■ h(0) and an O-CM elliptic curve E/l with an L-rational point of order £. 

Proof of Theorem \1.7\ First we verify that any d G £0 is non-Olson. By |2] Theorem 
1.4], 2 is a non-Olson degree. It remains to consider d = Cf ■ for a prime £ > 3 

with £ = 3 (mod 4). Let K = Q(y/—£)- By Proposition 14.31 there is an O k - CM elliptic 
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curve E defined over a number field L of degree (VU?) su °h that E(L) contains 

a point of order £. Thus 15(1) [tors] is not an Olson group and d is a non-Olson degree. 

Next, we suppose d is a non-Olson degree and show d G There is an elliptic 

curve E defined over a number held F of degree d for which £'(F)[tors] is not an Olson 
group. Since 2 G £f, we may assume that d is odd and hence that F admits a real 
embedding. 

By Proposition 14.21 E(F) contains a point of prime order i where £ = 3 (mod 4). 
By Proposition 14.11 Q(<y) C FK , where K is the CM held. Thus, FK contains the 
quadratic subheld (Q) (•>/—?) of Q(0)- Since 4 { [FK : Q], the held FK can contain only 
one quadratic subheld, and so K = Q(\/— I). 

Suppose hrst that i > 3. Then Lemma [2731 shows that h,K-{£— 1) | wk — \ — = 2 d. Thus 
h k ■ yy | d and d G M(fS\ Now suppose l = 3. Since 7?(F)[tors] is not Olson, it must 
have a point of order 9. By Proposition 14.11 Q(Cg) C FK. Thus 6 | [FK : Q] = 2d, so 
3 | d. But 3 = yy . , so again d G M(5f). □ 

5. Proof of Theorem 11.31 Olson degrees have positive density 


Theorem 11.31 follows from Theorem 11.71 together with the following elementary result 
from the theory of sets of multiples. 

Lemma 5.1. Let <£ C Z + . IfJ2 g e& g < °°> ^ en M(&) has an asymptotic density. If 
moreover 1 ^ , then the density of M(&) is strictly less than 1. 

Proof. See Theorem 0.1 and Corollary 0.10 in Chapter 0 of Hall’s monograph [12]. □ 

We can now prove Theorem 11.31 

Proof of Theorem \1.3[ In view of Lemma [5711 it suffices to show that g < °°, 

where is the set defined in Theorem 11.71 Siegel’s theorem (see for instance [18, p. 
124]) implies that for each e > 0, 

~Y~ ' £3/2 ~ e - 

Fixing any e < |, we obtain the desired convergence. Alternatively, the work of 
Goldfeld-Gross-Zagier yields an effective lower bound yy • ^(logf) 1-6 (see 

HSl p. 540]). Now fixing e G (0,1), partial summation along with the prime number 
theorem gives that Yf,i £(i 0 gV~ £ < 00 ' D 

Remark 5.1. By another appeal to Proposition 13.11 one can prove Theorem II.31 without 
using any lower bounds on Iiqj yyn. Compare with the proof of [29] Theorem 4], 

6. Proof of Theorem 11.41 Prime power Olson degrees 


Proof of Theorem \l. f\ If p < 5, then p and its powers are non-Olson degrees, so we 
assume that p > 7. Suppose that p n is not an Olson degree. From the classification 
of Olson degrees (Theorem 11.71] . there is a prime I > 3 with 1 = 3 (mod 4) for which 


i -i 


■ ft-Q(yr£) | p n ■ Hence, there are integers r > 1 and s > 0 with r + s < n, 

1-1 


2 


P r , and h Q{V=l) = p s . 
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We argue that p is bounded (ineffectively) in terms of n. By Siegel’s theorem, if p is 

1 1 r 1 

large in terms of n 1 then > £ 2 ^ 3 ^. > p 2 ~ 3. Using the elementary explicit upper 

bound 

(10) < £ 1/2 log£, 

(see, e.g., [20] §2]) we find that for p large enough in terms of n, we also have hrryy+n < 

Thus, p ~ 1 / 3 < p s ~i < p 1 / 3 . Since s — r /2 is an integer or half-integer, we must 
have s = r/2. In particular, r = 2s is even. But then £ = 2 p 2s + 1 = 0 (mod 3), 
contradicting that £> 3. □ 

Remark 6.1. For general n, the ineffectivity of Siegel’s theorem prevents us from giving 
a concrete bound on the largest non-Olson prime power p n . However, as we explain 
below, the above argument can be made effective when n = 1, 2, or 3. In this way, we 
obtain a simple proof that p n is Olson for every p > 5. (Recall that when n — 1, this 
was proved already in |2j.) 

Given a counterexample, choose £,r, and s as in the above proof. As before, working 
modulo 3 shows that r is odd. To finish the proof, it suffices to prove that s = 0, i.e., 
= 1- To see that this is enough, notice that £ = 2p + 1 or 2 p 3 + 1, where p > 5, 
so that £ > 11. Now if K is an imaginary quadratic field with hx — 1, an elementary 
argument shows that every prime smaller than is inert in K. In particular, 3 is 

inert in Q(\/—£), forcing 3 | £ — 1 and thus 3 | p. But this contradicts that p > 5. 

Now we prove that s = 0. If r = 3, the inequality r + s < 3 immediately forces s = 0. 
If r = 1, so that l — 2p+ 1, then (fill implies that s = 0 for all p > 41. For 5 < p < 41, 
we check directly that there is no case where £ = 2p + 1 is prime and h Q( x /^g) is a power 
of p. 


7. Proof of Theorem 11.21 Averages of T CM (d) 

7.1. The average over odd d. Since the results for odd d are easier to obtain, we 
start there. 

Proof of the upper bound in Theorem U.ttf ii). Recall that Tcm(^) > 6 for all positive 
integers d. Thus, from Proposition 14.21 we may assume that Tcm(^) = or 2£ a for 
some prime £ = 3 (mod 4) and some positive integer a. 

For any curve achieving the maximum indicated by Xcm(gO, the CM field must be 
Q(\/—fO, for the same reason as in the proof of Theorem 11.71 Now we apply Lemma 
!2.3l to bound the number of possible values of d < x, given that £ a divides ffE(F)[tors]. 
By a calculation similar to that seen in the proof of Theorem 11.11 the number of such 
d is at most 100 ^— x £a . So given £ a , the contribution to J2d<x 2 \d Tc'm( d) from these 

d is at most 100 £a • 2£ a = 200 x/h^^iy 

We now sum on the possibilities for £ a . Since £ a < 100+ there are O(logx) possible 
values of a. Moreover, the only values of £ that can occur are those with £ ■ < 

100x. Fix a small e > 0. Recalling Siegel’s lower bound /iq( yxo f? 1 / 2-6 , we fold that 
£ < x 2 / 3+e (assuming x is sufficiently large). Hence, 

^200-——— -C aUogx ^ ^ x x ' (x 2 ' /3+e ) 1 f 2+e C x 4//3+2e . 

fa Q(V^7) f< 2/3 + e 
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Since e may be taken arbitrarily small, the upper bound follows. □ 

Proof of the lower bound in Theorem, 1 1.2( ii). Here the main difficulty is the need to 
avoid double counting. 

Fix a small e > 0. For large x, let Y = x 2 / 3 ~ e , and let TP§ be the set of primes E = 3 
(mod 4) belonging to [Y, 2 Y}. Then Y/ log Y. We prune the set £P 0 as follows. 

Let t\ be any element of TP§. Remove from TPq all E for which Yy- | 

Now let £ 2 be any remaining element, and remove all E for which Yy- \ =y^~ ■ hq^y^y 
We continue in the same way until all elements of are exhausted. Let TP be the 
set •••• The maximal order of the divisor function (see [15] Theorem 315, p. 

343]) shows that the number of primes removed at each step in the construction of TP 
is smaller than x e,/2 , and so f^TP > x 2//3 ~ 2e . 

By construction, as E ranges over TP, the products Yy- ■ are all distinct. By 

genus theory, all of these products are odd. Since t < 2 Y and hq/^ry^ < E 1 ^ 2 log E, we 
hnd that each Y^- ■ < x - Putting all of this together with Proposition 14.31 

£ T cu(d) >^2 t cm (Y 1. h() Y >Y,t>Y-#3*> x 

d<x £CL& ' 

2 \d 

Since e can be taken arbitrarily small, we obtain the lower bound. □ 


7.2. The unrestricted average. We will use the following result. 

Proposition 7.1 (|5, Theorem 1(a)]). For every prime E = 1 (mod 3), there is an el¬ 
liptic curve E with j{E) = 0 over a number field F of degree with E{F ) containing 

a point of order E. 


Proof of the lower bound in Theorem \l."2\f i). Immediately from Proposition 17.11 

J2 Tcm (d)> J2 Tcm C~3^)~ ^ £ ~ X ^ ° 

d< x x<£<3x ' ' x<£<3x x<£< 3x 

1=1 (mod 3) 1=1 (mod 3) i= 1 (mod 3) 

The proof of the upper bound is considerably more intricate. The needed methods are 
similar to those used by Erdos to estimate the counting function of the range of the 
Euler ^-function [ 8 ]. To continue, we need two further ‘anatomical’ results. 

Lemma 7.2. 


(i) There are positive numbers C\ and C 2 such that for all k e Z + and all real 
numbers x > 3, we have 


< x | co(d) = k} < Ci 


x (log log x + C 2 ) 
logx (k — 1 )! 


k -1 


(ii) There is a positive number C 3 such that for all K e Z + and all real numbers 
x > 3 , we have 
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Proof. Part (i) is a classical inequality of Hardy and Ramanujan [lTJ. Part (ii) is taken 
from [13] (Exercise 05, p. 12); for details, see the proofs of Lemmas 12 and 13 in 
[ 22 ]. □ 

To prove the upper bound in Theorem ll,2f i). we will show that the mass of Tcm (cO is 
highly concentrated on certain arithmetically special d. 

For each positive integer n, we form a set of integers A(n), with definition motivated 
by the statement of Theorem 12.41 For each prime power £ a with a > 2, let 

A(r) = {£ a ~ 2 {£ -!){£+ l),£ a ~ 2 (£ - l) 2 , £ a ~\£ - 1)}, 

and for each prime £. let 

A(£) = {f _ 1 ^£- 1 ) 2 ,£-l}. 

For any n G Z + , let A(n) be the set of integers A that can be written in the form 

( 11 ) 

i a \\n 

where each A ^ G A(£ a ). 

Lemma 7.3. Let n be a positive integer. 

(i) The cardinality of A{n) is bounded above by 3 

(ii) Each A G A (n) satisfies 

A » n/(loglog(3n)) 2 , 

where the implied constant is absolute. 

(iii) Each A G A(n) has 

0(A) > fi(ra) - 2. 

Proof. Since #A(£ a ) = 3 for each prime power £ a , (i) is immediate. To prove (ii), 
notice that each A^» g A(£ a ) satishes A ^ > £ a (l — l/£) 2 . Consequently, each A G A [n) 
is bounded below by nY\^ n {l — l/£) 2 = ip(n) 2 /n. The claim now follows from the 
estimate ip(n) n/loglog(3n) (see, e.g., [T5], Theorem 323, p. 352]). For (iii), observe 
that except in the case £ = 2, each A ?<* G A^ has ^(A^q) > a, and that when £ = 2, we 
have the weaker bound fl(A^) > a — 2. □ 

Proof of the upper bound in Theorem \1.2( i). For even d, let Tf M (d) be defined in the 
same way as Tcm(gO, but with the extra restriction that E is defined over a degree d 
number held F containing the CM field of E. Since we can replace F by a quadratic 
extension F'/F containing the CM held, we have Tcm(^) < Tf M (2d) for all d. Thus, it 
suffices to establish the claimed upper bound for 'f2 d<x Tf M (2d). The contribution to 
this latter sum from values of d with T' CM (2d) < x/ logx is trivially 0[x 2 j log#), which 
is acceptable for us. Since T' CM (2d) < Tc M (2d) < Cx log logo; for a certain absolute 
constant C (see Theorem 1 of 0), the contribution from the remaining values of d is 

•C x log log x 

d<x 

T CM( 2d ) > l^ 


1 . 
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The proof of the theorem will be completed if we show that 

( ) — (logx) 1-1 " 0 ! 1 ) ’ 

as x —> oo. To this end, suppose T' CM (2d ) — n> x/logx. From Theorem 12.41 12d is 
divisible by some A G A(n). So with 

A' - |J A(n), 

j^CtKCx log logx 

we see that 

(13) ^ 1 < #{-D < 12x : A | D for some A G A'}. 

d<x 

We bound the right-hand side of from above by considering various (possibly 
overlapping) cases for A. For notational convenience, we put A" = Cx log logx. We let 
e > 0 be a small, fixed parameter. 


Case I: A G A(n) for an n G (j^|y,A"] with uj(n) < log logx, where rj > 0 is a 
sufficiently small constant. “Sufficiently small” is allowed to depend on e, and will be 
specified in the course of the proof. 

Using the lower bound from Lemma 17.31 on the elements of A(n), we see that the 
number of D < 12x divisible by some A G A(n) is 


«i V - <C -(log log x) 2 y 1 -C -(log logx) 2 -3^ *C - (log log x) 2 (log x 

* ^ A n < ^ <n fi 


AeA (n) 


AEA(n) 


\V log 3 


If we assume that q < e/log3, this upper bound is 0(|(logx) 2e ). Thus, the total 
number of D that can arise in this way is 

(14) <C x(logx) 2e -. 

n 

T-2—<n<X 

log X — 

co(n)<r] log log x 


To estimate the sum we appeal to Lemma [772! ii . For each T G [x/logx, A], the 
number of n < 2T with uj{n) < ij log log x is 




T 

logx 


E 

l<fc<77log logic 


(log logx + 0(l)) fc 1 


We can assume r) < /. Then each term in the right-hand sum on k is at most half 
of its successor (once x is large). Hence, the sum is bounded by twice its final term. 
Recalling that (k — 1)! > ((k — l)/e) fc_1 , the expression in the preceding display is thus 
seen to be 0(T( logx) ??log ( e / ?7 )~ 1+e ). Hence, 

y ^ < 2T | u(n) < log logx} 

n£[T,2T] 
uj(n)<r] log log x 

< (logx) T?Iog(e/l?) - 1+e . 
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Letting T range over the 0(log logic) values of the form T = 2 J x/logx, where j > 0 
and 2^xj logic < X, we find that 

J2 - < (logic) ,?log(e/T ' ) - 1+2e . 

r£h <n ^ x 

o;(n )<?7 log log x 

Substituting this into (fT4lh and choosing rj sufficiently small in terms of e, we get that 
the total number of D arising in this case is 0(ic(logx) 5e (logic) _1 ). 

Case II: A G A (n) for an n G with //loglogic < u j(n) < lOloglogic and 

^2 l<|loglogx. 

i\n 

n(«-i)>4o /n 

In this case, n must be divisible by more than | log log x primes £ with Q(£ — 1) < 
40/rj. The number of primes £ up to a given height T satisfying this restriction is 
0(T/(logT) 2+ °A)), as T —» oo. (In |8] p. 210], this estimate is deduced from the 
upper bound sieve. For more precise results, see [23j.) In particular, the sum of the 
reciprocals of such primes £ is bounded by a certain constant c. Thus, the number of 
possibilities for n is at most 

* E *i( E ~/)^ x E i- 

k>% loglog# £<X k>Q\og\ogx 

n{£-l)<40/r] 

(Here we used the multinomial theorem.) Taking ratios between neighboring terms, we 
see that the right-hand sum is at most twice its first term (for large x). Using Stirling’s 
formula, we find that the right-hand side is crudely bounded above by ic/(logic) 100 . 

Given n G (^|^,X], the number of corresponding D is 
«i ^ i -C -^-(loglogic) 2 • #A(n) 

AeA (n) 

<C (logo;) 2 • #A(n) < (logic) 2 • 3 101o g lo s x (logic) 15 . 

Summing over the O(ic/(logic) 10 °) possibilities for n, we see that only 0(ic/(logic) 85 ) 
values of I) arise in Case II. 


Case III: A G A (n) for an n G (j^, A"] with rj log log x < uj{n) < 10 log log x and 

^2 l> 7 ^ 1 og logic. 

l\n 

Q.{£-\)>m/ri 


Let £ be any prime dividing n with Q(£ — 1) > 40/rj. Choose a with £ a || n. Since £ — 1 
divides each element of A(£“), all of these elements have at least 40 /?7 prime factors, 
counted with multiplicity. So from (fill) , each A G A(n) satisfies 


40 77 

H(A) > — • /- log log x 
V * 


20 log logic. 


In particular, any D divisible by a A G A(tz) satishes Q(D) > 20 log log x. But Lemma 
I7.2f ii) implies that the number of such D < 12x is 0(ic/(logic) 10 ). 
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Case IV: A G A (n) for an n G (j^, V] with oj(n) > lOloglogx. 

For each prime i > 2, we have trivially that 0(£ — 1) > 1. Reasoning as in Case III, 
we see that each A G A(n) satisfies 

12(A) > u(n) — 1 > 9 log logic. 

Thus, any D divisible by such a A also has Q(D) > 9 log logic. By another application 
of Lemma [7.2 If iih the number of these D < 12ic is 0( ic/(logx) 5 ). 

Assembling the estimates in cases I-IV, we see that the right-hand side of (fT3l) is 
0(ic(logic) 5e (logx)' 1 ). Since e > 0 is arbitrary, the upper bound is proved. □ 

8. Proof of Theorem 11.5b Distribution of maximal torsion subgroups 

Here again it is convenient to treat the upper and lower bounds separately. The upper 
bound uses an elementary and classical mean-value theorem of Wintner. 

Proposition 8.1 ([31, Corollary 2.2, p. 50]). Let f : 7L + — > C, and let g: Z + —» C be 
determined by the identity 

f ( n ) = g(d) for all n G Z + . 

d\n 

If i < oo, then as x —> oo, 

f(n) = (© + o(l))x, where & := ^ 

n<x n =1 

Furthermore, if f is multiplicative, then & can be written as a convergent Euler product: 

If G is an abelian group of order n and torsion rank at most 2, then G has a unique 
representation in the form Z /d'L x Z/^Z, where d | ^. So given n, the number of such 
groups G is given by r'(n) := 1- Notice that r' is multiplicative. 

In the next lemma, we estimate asymptotically the number of abelian groups of torsion 
rank at most 2 and order at most y. 

Lemma 8.2. As y —>■ oo, we have 

n<y 

Proof. We apply Proposition 18.II with / = r 0 and g = In, where 1q is the characteristic 
function of the square numbers. Then Y^=i = C(2) < cxd. Since = 

C(2) = we obtain the lemma. □ 

Remarks 8.1. 

(i) For each fixed r G Z + , one can prove in a similar way that the number of 
abelian groups of order not exceeding y and torsion rank not exceeding r is 
asymptotic to (ri 2 </c<r C(k))y, as y —» oo. (For a more precise estimate when 
r > 3, see [I].) This result dovetails with the theorem of Erdos and Szekeres 
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[9] that the total number of abelian groups of order at most y is asymptotically 
(nr. 2 CW)9. Here nr, 2 CW = 2.294856591.... 

(ii) Fix a > 0. Proposition 18.11 implies that Y2n< y T '( n ) a ~ as y —* oo, for 

some constant To see this, let / = r ,a , and define g by Mobius inversion, 
so that g(n) = J2d\nh(d)T'fn/d) a . hi particular, g(jp) = r'{jp) a — 1 = 0 , while 
for prime powers p k with k > 2, we have the crude bounds 

0 < g(p k ) = r\p k ) a - T\p k ~ l ) a < k a . 

Hence, E",* = E (! + f + f + ■ ■■) = n„ (l + 0(£)) < oo. 

We will use this remark below. 


Proof of the upper bound, in Theorem \1.5l From Lemma 18.21 the number of abelian 
groups of order at most x/ logic and torsion rank at most 2 is 0(x/ logic), which is neg¬ 
ligible for our purposes. So it suffices to consider groups that are maximal for degrees 
d < x having TcM(d) > x/ logic. Such d have the property that Tf u (2d) > x/ logic. 
Given e > 0, we showed (see ffT2]l ) that the number of these d is at most x/ (log ic) 1_e for 
large x. Let SS be the corresponding set of values of Tcm(gO- Then the number of max¬ 
imal torsion subgroups coming from d with Tcm(gO > x/ logic is at most (n). 

Holder’s inequality shows that for any positive a and (3 with ^ ^ = 1, 

/ \ / \ V/3 

£-'(«)< £ r'(„)“ £l . 

nGc^ \ n<Cx log logo; / \ / 

Here C has the same meaning as in the proof of Theorem ll.2( i). Let f3 = 1 + e, so a = 
—. By the second remark following Lemma [8.21 the first sum on n is 0(x log logic). 
The second sum on n is 0(x/(logx) 1 ~ £ ). So the above right-hand side is 

6 1 (1 — c) -t q 

•C (x log log x) 1+ 7 • IC 11 ^ (logic) 1+^ <C x/ (logic) ae . 

Since e can be taken arbitrarily small, this is acceptable for us. □ 


The lower bound relies on a very recent ‘anatomical’ result of Luca, Pizzarro-Madariaga, 
and Pomerance. 


Proposition 8.3 ((121, Theorem 3]). There is a 6 > 0 such that: for all u G Z + and 
v e Z, there is C(u,v) > 0 such that for all 2 < z < x, the number of primes £ < x 
with u£ + v having a divisor p — 1 with p > z, p ^ l, and p prime is at most 


C(u, v) 


tt(x) 

(logz)' 5 ' 


Proof of the lower bound in Theorem If. 51 We will prove the stronger assertion that 
there are xj logic distinct values of Tcm(^) f° r d < x. We consider degrees d = 
where £ G (ic/2,x] is a prime with £ = 1 (mod 3). By the prime number theorem for 
progressions, there are (| + o(l))j^ such primes £. We will show that for all but 
o{x/\ogx) of these values of £, the corresponding d is such that Tcm(^) has largest 
prime factor £. Consequently, after discarding the o(x/ logic) exceptional values of £, 
we obtain a set of (| + o(l))^|y values of d on which the map d ha Xcm(gO is injective. 

From Proposition 17.11 there is a CM elliptic curve E over a number field of degree d 
for which E has a rational point of order £. So if the largest prime factor of Tcm(^) is 
not £, then either 
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(i) there is a prime p dividing T CM (d) with p > 7, or 

(ii) 7 \ 7cm(< 7) and 7 cm (d) > 7. 

Choose an F of degree d and a CM elliptic curve E/ F with ^£'(F)[tors] = T CM (d). Let 
K denote the CM held. 

In case (i), E(FK) has a point of order p. Hence, Lemma [2.31 implies that 

p - 1 | wfk [FK 2 ^ | w FK d I 4(7 - 1). 

Since p > t > xj 2, Proposition 18.31 (with u — 4, v — —4) shows that there are only 
0(x/{\ogx) 1+s ) possibilities for 7. This is negligible for us. 

Now suppose that we are in case (ii). To start off, we suppose additionally that 
J1(7 ~cm(c 0) > 10 log logs. Let n' = #E(FK)[ tors]. Since 7 cm (rf) = #E(F) [tors] ] n ', 
we have 72 (tt/) > 10 log log x. Theorem 12.41 shows that 4(7 — 1) is divisible by some 
A G A in'). So from Lemma l7.31 iii). 

72(4(7 — 1)) > 72(A) > 72(n') — 2 > 9 log log x 

(for large x). But 4(7 — 1) < Ax, and from Lemma 17.2f ii) there are only 0(x/( logo;) 5 ) 
integers in [1,4a;] with more than 9 log log x prime factors. In particular, this subcase 
corresponds to only o(x/ log x) possible values of 7. 

Finally, suppose 72(T CM ((i)) < lOloglogx. Since we are in case (ii), the largest prime 
factor r of T CM (d) satisfies 

r > (T CM (d))^tm > £i/io log log ^ z := ^, 1/20 log log 

Lemma 12.31 implies that r — 1 | 47 — 4. We know also that r ^ 7. Appealing again to 
Proposition 18.31 we find that 7 is restricted to a set of size O^loglogx^/Qoga:) 1 ^). 
Again, this is negligible. □ 
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